A complete solution to package and build a ready for distribution Electron app for MacOS, Windows and Linux with “auto update” support out of the box
91%
Total Score
88
100
100
80
100
One contributor made about 89% of recent commits, creating concentration risk. However, five other contributors were active during the same period and the repository is backed by an organization, so this is a caution rather than a severe abandonment signal.
No repository security policy was found, leaving vulnerability-reporting guidance less transparent than ideal. The active project and security scanning provide partial compensating evidence, so this is a limited hygiene concern.
Most workflows declare read-only permissions, but one lacks top-level permissions and two declare top-level write access. This is a workflow-hardening gap, though no dangerous workflow pattern was detected.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
chalk Version ^4.1.2 | — | — |
yargs Version ^17.6.2 | — | — |
ci-info Version ^4.2.0 | — | — |
fs-extra Version ^10.1.0 | — | — |
lazy-val Version ^1.0.5 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.